Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/3e6eca20-984c-38bb-912e-539ca9ab80f4.roa
File: 3e6eca20-984c-38bb-912e-539ca9ab80f4.roa (raw, json)
Hash identifier: hF3wGaoTHQ128Sh78w5/rauY3OgC1Rw0zhx4CAU/JN8=
Subject key identifier: 36:46:3E:5D:5B:53:1A:48:B9:37:0F:A0:87:B2:39:C8:3E:BB:A8:4A
Certificate issuer: /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Certificate serial: 010D0C9F432858496FAF0E2EC2A5E6F4B9C56880
Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/3e6eca20-984c-38bb-912e-539ca9ab80f4.roa
Signing time: Sun 06 Apr 2025 13:01:01 +0000
ROA not before: Sun 06 Apr 2025 13:01:01 +0000
ROA not after: Sat 05 Jul 2025 13:01:01 +0000
asID: 6621
IP address blocks: 72.168.0.0/19 maxlen: 19
72.168.80.0/21 maxlen: 21
72.168.87.0/24 maxlen: 24
72.168.88.0/21 maxlen: 21
72.168.94.0/24 maxlen: 24
72.168.95.0/24 maxlen: 24
72.168.96.0/19 maxlen: 19
72.168.96.0/21 maxlen: 21
72.168.128.0/22 maxlen: 22
72.168.132.0/22 maxlen: 22
72.168.136.0/22 maxlen: 22
72.168.140.0/22 maxlen: 22
72.168.142.0/23 maxlen: 23
72.168.144.0/22 maxlen: 22
72.168.148.0/22 maxlen: 22
72.168.152.0/22 maxlen: 22
72.168.156.0/22 maxlen: 22
72.168.160.0/22 maxlen: 22
72.168.164.0/22 maxlen: 22
72.168.168.0/22 maxlen: 22
72.168.172.0/22 maxlen: 22
72.168.176.0/22 maxlen: 22
72.168.180.0/22 maxlen: 22
72.168.184.0/22 maxlen: 22
72.168.188.0/22 maxlen: 22
72.168.224.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:6f:af:0e:2e:c2:a5:e6:f4:b9:c5:68:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Validity
Not Before: Apr 6 13:01:01 2025 GMT
Not After : Jul 5 13:01:01 2025 GMT
Subject: CN=bd9dba12-e1c5-43e0-8943-b1adc5da3b77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0b:c6:7a:35:9e:81:93:25:27:49:6e:fe:a1:
5e:9d:8c:58:03:09:df:45:f9:34:3d:d5:01:5a:51:
0c:32:91:80:0d:c9:10:03:40:55:9c:c5:92:05:e1:
ff:1c:b7:b8:4f:16:b3:67:3b:23:27:fd:30:90:fd:
45:e3:21:48:16:23:23:18:a0:3a:75:c9:0a:7f:02:
d7:e2:45:51:a6:f2:59:e9:3a:18:70:eb:31:14:6e:
cc:35:57:78:9e:44:61:4a:7f:bb:e6:86:7f:d9:49:
98:64:6b:b0:2d:56:a2:32:ee:dd:74:30:14:fa:fd:
9d:4c:01:44:c5:9f:5d:73:cf:69:0d:e3:45:35:d7:
71:5f:43:dc:09:8c:aa:5c:cf:0c:bd:59:97:19:4b:
99:80:f8:4f:22:e7:2f:d6:f2:e5:49:8f:c0:90:ef:
3c:49:35:17:6c:8d:b4:7a:6c:ec:3c:84:fc:3a:b8:
ec:b5:93:e9:d1:52:38:0b:76:1d:a8:5a:f2:dd:69:
84:d9:e5:86:6b:86:fb:ee:d2:05:d4:33:6a:ee:c9:
d5:25:9b:87:4c:62:39:3e:8d:61:64:eb:c5:56:01:
19:8e:03:2b:5f:cd:4f:9e:1b:35:c5:fd:b5:09:3e:
b3:98:ad:8c:6a:24:8f:e3:e2:ac:e5:4a:a1:4d:aa:
4c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:46:3E:5D:5B:53:1A:48:B9:37:0F:A0:87:B2:39:C8:3E:BB:A8:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/3e6eca20-984c-38bb-912e-539ca9ab80f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl
X509v3 Authority Key Identifier:
keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
sbgp-ipAddrBlock: critical
IPv4:
72.168.0.0/19
72.168.80.0-72.168.191.255
72.168.224.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:94:7a:1d:d0:db:0b:10:30:21:6c:5a:29:14:52:b1:58:98:
20:88:d8:1d:24:49:d8:c5:46:57:58:a2:f4:cf:6d:83:53:de:
53:70:37:9a:90:97:5f:d3:b2:50:59:e0:87:3a:fb:25:1e:00:
21:90:e3:dd:95:29:65:51:43:b8:4a:d6:be:34:bf:e8:3a:1c:
e0:ab:9f:c1:51:1b:3c:7c:08:33:96:fd:71:af:36:ff:08:0e:
15:40:3d:94:dc:9f:ad:a1:75:1c:94:fa:60:18:11:e9:f5:ec:
bb:78:ef:71:11:33:7e:cc:66:29:3b:ff:74:24:6f:04:12:0c:
a8:ce:ad:47:6c:53:09:c8:0b:3a:e9:e4:36:e7:58:ef:c1:70:
07:73:78:c9:a1:21:f8:a5:0e:4c:7a:3c:69:bd:96:f5:e4:58:
6c:92:47:e1:2a:07:31:53:fa:ab:8d:1f:c6:da:a7:1d:f7:0d:
b3:9c:9c:4d:e2:6e:ad:43:4b:78:a2:99:d6:9f:21:66:40:e2:
1b:27:53:c9:98:15:42:ef:15:bc:66:2e:9d:c8:da:f3:f7:c9:
86:d4:d9:37:87:1d:31:3d:dd:68:9f:bb:be:b5:e1:fc:cd:c6:
0a:dd:00:1d:88:d9:72:3b:7b:68:83:4d:27:12:55:f0:37:16:
a1:10:e3:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:56:41 2025 by rpki-client on console.sobornost.net